GoAnywhere Services Release Notes
Feb 2, 2012 - Version 2.6.0 Released
- Added a Secure Mail module which allows web users to send ad-hoc messages with file attachments to recipients, which uses a combination of email and secure HTTPS protocol. The following features are available in Secure Mail:
- No limits on the number of files you can attach to a Secure Mail package.
- Multiple recipients can be targeted.
- When messages are sent, each recipient receives an email with a unique link to download the files securely using HTTPS.
- Users can request a read receipt to be notified when a recipient reads the message.
- Packages can be set to expire after a given date.
- Download restrictions can limit the number of times recipients can download files.
- Detailed audit logs are generated for all Secure Mail activity including when packages are sent, when they are opened and when their files are downloaded.
- Messages can be saved as drafts for future editing.
- Inactive packages can be automatically purged to save disk space.
- Added self-registration for web users. When enabled, the following features are available:
- Administrators can define which email addresses or domains are allowed to self-register. For example, you could only allow your employees to register with their corporate email addresses. For each registration group, you can specify the template to use to determine the registered user's default permissions, home directory, etc.
- Self-registered Web Users can be authenticated against an existing Active Directory, LDAP or IBM i system. Otherwise you can choose to have them create a new account and password in GoAnywhere Services.
- Email notifications can be sent to Web User Managers when a web user registers.
- Users can be registered into a pending approval status, requiring an administrator to approve them before becoming active.
- Added the ability to automatically blacklist IP addresses to prevent potential brute-force or denial of service attacks. This is available under the Security menu.
- Added the ability to notify web users by email when their passwords are about to expire.
- Added a new security policy to enforce restrictions on web user names, such as a minimum length.
- Added a new trigger event that is fired when a web user account is disabled due to excessive login failures.
- Added the ability to search for web users based on their account status. The account status is now displayed as an additional column to easily indicate if they are pending approval, expired, disabled or enabled.
- Added new configuration options to the HTTPS service allowing HTTP traffic to be automatically redirected to HTTPS.
- Added the ability to browse projects in GoAnywhere Director when configuring a trigger that calls a project.
- Added the ability to import multiple certificates from a single input file.
- Added support for importing of PEM formatted private keys and the associated certificate chain.
- Added SSL/TLS support when connecting to the SMTP server defined in the global settings.
- Added the ability to disable the reuse of SMTP connections. This is to work around issues with some Exchange servers when connections timeout.
- Added a new setting where administrators can define the URL to the HTTPS Web Client. This setting is used when sending out emails that contain a link to the site.
- Added a new setting in the HTTPS preferences to allow web users to update their profile via the Web Client.
- Enhanced all email templates to be HTML based. Email templates are now installed in the proddata/emailtemplates folder and will be used unless they are overridden by creating the same template in the userdata/emailtemplates folder. The templates in /proddata will be overridden during upgrades and the templates in /userdata will not be modified.
- Added a new configuration option to the SFTP service to override the software name and version that is published by the SFTP service.
- Adjusted the test results pop-up on the Configure Resource page for triggers to only show the stack trace of a failed test when the user clicks the 'Show Stack Trace' link.
- Fixed compatibility issues with Internet Explorer 9.
- Fixed a false validation error when the 'Rename Certificate Alias' dialog is canceled.
- Fixed rendering issues in various service configuration pages when there are long labels in outline tree.
- Fixed an issue where Connection Timeout changes were not being rendered back to the screen in Admin Server Configuration.
- Fixed a Null Pointer error that could occur when creating a web user with no password, but the template requires a password.
- Fixed an issue where web users are unable to change their password when an administrator forces a password change and the password policy has a minimum password age defined.
- Fixed an issue with installing an SSH key for a web user where the installed file name is not converted to lower case which causes issues on case sensitive file systems (e.g. Linux/Unix).
Dec 6, 2011 - Version 2.5.6 Released
- Fixed an issue in the HTTPS/AS2 service when a web user's home directory was set to a UNC path. This issue was introduced in version 2.5.3.
Oct 31, 2011 - Version 2.5.5 Released
- Enhanced the acceptable file extensions filter to allow additional customization in all services.
Oct 3, 2011 - Version 2.5.4 Released
- Fixed a potential issue with the SFTP service where some connections were failing when an SFTP client starts the key exchange before receiving the version message from the server.
- Fixed an issue with the SFTP Service were user defined Comments were not being applied properly.
Aug 26, 2011 - Version 2.5.3 Released
- Enhanced the FTP and FTPS services to allow forcing SSL encryption on the command and data channels.
- Fixed an issue with the HTTPS Service where the Basic and Enhanced Web Clients were not working properly with symbolic links.
Aug 11, 2011 - Version 2.5.2 Released
- Fixed an issue where 404 errors were logged to the Server Log when accessing the Web Help.
Aug 4, 2011 - Version 2.5.1 Released
- Fixed an issue where the idle timeout setting of the SFTP service was not taking effect and was always being set to 5 minutes.
- Fixed an issue with the SFTP service where the displayed active session count was not accurate when sessions were closed due to inactivity. This was resulting in an internal server error when the Active Sessions page was accessed.
- Fixed an issue with the AS/2 dashboard statistics where the number of uploads reported was incorrect.
- Fixed an issue with the FTP/FTPES (Explicit SSL) service where logins were failing with plain (unsecured) FTP if the web user was configured with certificate authentication for FTPES.
- Updated the MySQL JDBC driver from version 5.0.3 to 5.1.17.
Jul 25, 2011 - Version 2.5.0 Released
- Implemented the AS/2 service. This separately licensed feature allows your organization to receive messages from your trading partners over the AS/2 protocol. The AS/2 service supports synchronous and asynchronous MDNs (aka receipts). The asynchronous receipts can be sent to an email address or another AS/2 server at your trading partner’s location. Provided configuration settings (accessible from the administration screens) for setting up general AS/2 options, as well as AS/2 settings for each trading partner account. Also provided detailed audit logs of all AS/2 activity which can be queried and viewed in the administration screens.
- Added support for storing the GoAnywhere Services database on IBM DB2/400, Microsoft SQL Server, MySQL and Derby (network mode). A migration wizard is provided to allow the migration of the existing data from the embedded Derby database to the external database.
- Enhanced the FTP/FTPS services to route secondary connections (passive and active data connections) through the GoAnywhere Gateway if the primary (control) connection was originated from the GoAnywhere Gateway.
- Provided a new screen to allow the "real-time" monitoring of active sessions for each of the services. For instance, you could view all the users that are logged onto the SFTP service which would show the user name for each session, when they connected and how much data they transferred. From the monitoring screen, you can also view the audit trail of commands that were issued by the user. This screen includes the ability to terminate (kick) selected sessions.
- Added the ability to specify a custom banner message for the FTP, FTPS and SFTP Services.
- Added a new Trigger Action to allow the renaming of files. For instance, after a file is uploaded, a trigger could be defined to rename the file to a different name.
- Added a new Trigger Action to allow the execution of native commands and scripts. For instance, after a file is downloaded, a trigger could be defined to call a shell script.
- Added a new Security Settings screen under the Security menu. This screen allows you to specify the idle session timeout for administrator users, and whether browsers are allowed to save their login credentials.
- Added a new feature that allows Web Client users to reset a forgotten password from the login page. If the web user has an email address on file, they can be emailed a link which will direct them to a page to specify a new password. This feature can be enabled or disabled by the product administrators.
- Enhanced the Web Client to allow a custom disclaimer to be displayed on the login page. Administrators can configure whether or not the disclaimer is displayed, the text to display and an optional link to a disclaimer document.
- Enhanced the Web Client to display a help link which will display the default help document shipped with the product. The administrator can optionally specify a custom file/URL containing a custom help document for the end users.
- Added the option to transfer files in ASCII mode when using the Enhanced Web Client. Administrators can define the file name patterns that should be transferred in ASCII mode.
- Added the ability to resume failed transfers from the Enhanced Web Client.
- Enhanced the usability of the product screens by storing screen preferences for the admin users. For instance, it will remember the columns that were chosen by a user in the audit log screens, which will then be displayed the next time it is accessed. As another example, it will remember which statistics the user last viewed on the dashboard.
- Enhanced the overall styling of the product screens and menus for usability and aesthetics.
- For security reasons, updated the login process to destroy the old session and create a new session upon successful login.
- For security reasons, disabled HTTP GET requests for login processing.
- Implemented custom error pages to display any unexpected errors that occur during request processing.
- Added a new option to create a pool of SMTP connections that can be shared across by various modules when sending out emails. Administrators have the ability to define the maximum pool size.
- Added the ability to import SSH Public Keys for Web Users from within the administrator.
- Added an option in the Global Settings to adjust the Global Log Level.
- Enhanced the upload process in the HTTPS Service/Web Client to avoid using temporary files. The use of temporary files were causing issues in certain environments.
- Upgraded the embedded Apache Tomcat server from 6.0.18 to 6.0.32.
- Removed Groups and Web User Groups from the Quick Links on the Dashboard page and substituted them with Active Sessions and Audit Logs.
- Standardized the menu item labels on the main menu bar to make them consistent.
- Removed the Global Log Format setting from the Global Settings.
- Enhanced the Web User Password Policy to set a limit on the Minimum Age of a password.
- Enhanced the Web User Password Policy to disallow the reuse of a specific number of previously used passwords.
- Added a new permission to grant/deny checksum verification for web users. The upgrader will grant this permission to the 'All Web Users' group.
- Moved the Change Password from being a File Permission to a stand-alone permission.
- Added a column in the Service Manager page that displays the date and time each Service was started.
- Combined the User Guide and Support pages into a 'Help Center' page under the 'Help' menu.
- Removed the Live Help option from the Help -> Support page. The Live Help is still available through the Online Help Center link.
- Organized various action icons in the Trigger Manager, Web Users and Service Manager pages into a drop-down menu.
- Added the ability to encrypt the password in the Call Project Action.
- Updated the Login Method names to be more descriptive.
- Added the ability to provide direct links to download files from the Web Client.
- Increased the limit on Acceptable File Extensions for all services to 2000 characters from 512.
- Fixed an issue where configuration changes made to a service are not taking effect unless GoAnywhere Services is restarted.
- Fixed an issue where Web Users could not connect to various services through GoAnywhere Gateway when the Web User has a whitelist IP filter.
- Fixed an issue where the SMTP password in Global Settings was being stored unencrypted.
- Fixed an issue where Date Input fields were not always working when the Date/Timestamp format in the Global Settings was set to a two digit year.
- Fixed an issue where some browsers were automatically populating username and password fields in certain pages. This issue was present when the 'Save Password' option was enabled in some browsers.
- Fixed an issue where Trigger Actions were logging certain errors twice to the Trigger Log.
- Fixed an issue with using international characters in the trigger/action definition.
- Fixed a typo in the Enhanced Web Client where the status "Transferring" was misspelled.
- Fixed an issue in the Services Audit Logs where one could not switch between the Basic and Advanced tabs if no Severity options were selected.
- Fixed an issue in the Services Audit Logs where if one tried to switch from the Basic tab to the Advanced tab when no Severity options were selected, the error message was not being displayed.
- Fixed an issue where the Account Created email was sent when a Web User's password was updated.
- Fixed an issue with the SFTP service where SCP downloads were not completing when the 'Idle Timeout' was reached.
Apr 29, 2011 - Version 2.0.6 Released
- Enhanced the FTP/FTPS service to allow authentication with digital certificates. Digital Certificate authentication, with or without passwords, can be used for connecting to FTP service in Explicit SSL mode or to the FTPS service (Implicit SSL).
Apr 1, 2011 - Version 2.0.5 Released
- Fixed an issue with Login Failed Trigger Event to make the web user information available to be used by trigger actions and conditions.
Jan 28, 2011 - Version 2.0.4 Released
- Added an option to enable SCP support in the SFTP service.
Dec 9, 2010 - Version 2.0.3 Released
- Fixed an issue with the List Web Users page where the Reset Password option does not get rendered properly when filtering the list of Web Users.
Oct 20, 2010 - Version 2.0.2 Released
- Fixed an issue with the startup shell script that was failing to set the maximum memory allocated to the JVM on Unix and Linux installs.
- Fixed an issue where resetting a Web User password was sending an email using the incorrect template.
Sept 20, 2010 - Version 2.0.1 Released
- Fixed an issue where the SFTP server was showing 'Started' status when the server actually failed to start due to missing JCE policy files.
- Fixed an issue where audit logs were not recording login failures when the attempted user name has more than 20 characters.
- Fixed an issue with the background job (to disable inactive web users) running too frequently.
- Fixed an issue with the Acceptable File Extensions setting in the HTTPS server that was causing the Enhanced Web Client from launching correctly in certain cases.
- Fixed an incorrect validation with the Web User Imports.
Sept 1, 2010 - Version 2.0.0 Released
- Added the ability to integrate with GoAnywhere Gateway. This allows GoAnywhere Services to reside in the private network, creating a highly secure file transfer environment. With this configuration, trading partners will be able to transfer files directly to your private network without the need to open any inbound ports on the backend firewall. This feature also includes screens to manage and monitor the connection to GoAnywhere Gateway.
- Added an Enhanced Web Client. The Enhanced Web Client is a Java applet that allows Web Users to transfer multiple files concurrently, transfer entire folders, monitor the progress of transfers and verify the integrity of completed transfers. The Enhanced Web Client can be enabled or disabled from the HTTPS Service Preferences page.
- Added support for Web User Templates. Web User Templates provide a method to configure the default account settings when new Web Users are created.
- Added the ability to import Web Users from a CSV file.
- Added the ability for Web Users to authenticate against an Active Directory, LDAP server, or System i server, in addition to the internal database. The login method can be configured on a per Web User basis.
- Enhanced the logging for certain auditable actions such as adding, editing, or deleting Users, Groups, Web Users and Web User Groups.
- Added the ability to disable Web User accounts after a certain number of inactive days.
- Added support for a custom Web Client page title. The page title is displayed in the title bar of Internet browser when a Web User accesses the GoAnywhere Services Web Client.
- Enhanced the Help->About screen to show thread usage.
- Fixed an issue with the trigger conditions when using the ${event.user.loginDirectory} event attribute.
- Fixed an issue where Delete Folder events were not being fired when folders were deleted using HTTPS service.
June 17, 2010 - Version 1.3.2 (Patch Release)
- Made the system accounts "root" and "administrator" editable.
- Updated the Service Configuration to allow duplicate port numbers on listeners binding to different local addresses.
- Fixed an issue in the File Manager where, in certain cases after downloading a file, the other navigation and download links on the page stopped working.
- Fixed an issue in the File Manager where the columns did not align appropriately when used by a user with read only permission.
May 28, 2010 - Version 1.3.1 (Patch Release)
- Fixed an issue where certain HTTPS configuration options were not taking affect when the HTTPS service was started.
Apr 23, 2010 - Version 1.3.0 Released
- Added support for filtering connections based on IP addresses. The IP filter can be configured as Black List or White list and supports single IPs, IP ranges, and CIDR notation. The IP filters can be configured globally for all services as well as for each web user.
- Added a new Connection Rejected event type that can be used to execute a Trigger Action.
- Added the ability to integrate with Syslog servers. Administrative logs and service audit logs can now be sent to a Syslog server using either UDP or TCP protocols.
- Added a new action to move a file when a trigger event occurs.
- Added a new action to delete a file when a trigger event occurs.
- Added Connect and Disconnect command options for filtering audit logs for the HTTPS service.
- Renamed Connect event type to Connection Successful.
- Updated the SSL Certificate Manager to display the subject and issuer of the certificates.
- Added a new configuration option for setting the maximum number of active threads in the FTP and FTPS services.
- Updated the Permission options for Web Users and Web User Groups to no longer submit a request each time a checkboxes is selected/deselected.
- Updated the Key Manager Role description to not include OpenPGP.
- Relabeled the Global Preferences menu item to Global Settings.
- Updated the View Trigger screen to include missing attributes for the Call Project action.
- Fixed an issue with the anonymous login in FTP and FTPS services.
- Fixed an issue with the SFTP server where the Web User name was not being logged appropriately when a login attempt fails.
- Fixed an issue where the View Trigger screen was not displaying the correct Services that a trigger was defined for.
- Fixed an issue in the Trigger Detail Log where remarks longer than 256 characters were causing the logging to fail.
- Fixed an issue where duplicate trigger names for the same event type were allowed in certain cases.
- Moved the database configuration settings to config/database.xml.
- Fixed an issue on the Trigger Manager page where the list was not refreshing in certain cases.
- Fixed an issue with the SFTP service where the last login date was not being updated when a web user successfully logs in using Public Key authentication.
- Fixed an issue with the SFTP service related to Public Key authentication and expired accounts.
Feb 12, 2010 - Version 1.2.0 Released
- Enhanced the Database Maintenance operations such as Backup and Tuning. Database backups can now be scheduled using an Hourly schedule or a Daily schedule. Database Tuning can be scheduled using a Daily or Weekly schedule.
Dec 29, 2009 - Version 1.1.0 Released
- Added the ability to export certificate chains (PKCS #7 format) in the SSL Certificate Manager.
- Added the ability to export and import private keys (PKCS #12 format) in the SSL Certificate Manager.
- Added a new option to FTP and FTPS services to enable/disable site to site transfers when using a passive data connection.
- Fixed the Audit Log Details screen to include the Web User name.
- Fixed an issue with SSH Public Key authentication when the public key file name is in a different case than what the Web User has specified at the time of login.
- Fixed an issue where the active session count was not reset when a service is restarted.
- Fixed an issue with database backup files not unzipping correctly on UNIX/Linux systems using the system commands.
- Fixed an issue where the virtual path is incorrect when a web user's home directory is the root of the file system such as / or C:\.
- Fixed an issue with database backup rentention when the retention period is larger than 25 days.
- Fixed an issue with some trigger conditions that use physical paths.
- Fixed the FTP and FTPS services to return the timestamp in UTC for MLSD and MLST commands.
- Fixed the FTP and FTPS services to not return hidden files in response to the LIST command.
